Associate Analyst, IT Cybersecurity Incident Response

American Airlines; Fort Worth (TX); On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

Travel perks

Health benefits

Wellness programs

401(k) program

Employee discounts

Job summary

American Airlines is seeking a cybersecurity operations specialist to ensure asset inventories are accurate and logs are ingested correctly into enterprise SIEM systems. You will work with cybersecurity teams to identify security events, coordinate remediation with owners, and maintain runbooks and documentation across DAT applications.

Preferred candidates have a Bachelor's in a technical field, 1 year of information security experience, and familiarity with Windows/Linux environments and

Qualifications

• Foundational security concepts and familiarity with IT services across Windows, Linux, and application servers.
• Experience with monitoring, logging, or vulnerability management tools.
• Exposure to SIEM, CMDB/asset systems, or compliance processes.

Responsibilities

• Ensure all DAT-supported endpoints and applications are accurately inventoried and mapped for logging, monitoring, and vulnerability analysis.
• Maintain alignment between asset inventories and Cybersecurity tools; investigate and resolve discrepancies.
• Configure, validate, and troubleshoot log sources from Windows, Linux, and application platforms to ensure successful ingestion into enterprise SIEM tooling.
• Perform daily SIEM reporting to identify log ingestion gaps and coordinate fixes with application and system owners.
• Analyze log data to identify security-relevant events and collaborate with Cybersecurity Incident Response Engineering on alerting requirements.
• Review vulnerability scan outputs and track, resolve, and verify remediation with owners.

Skills

PowerShell

BASH

Python

Education

Bachelor's degree in Computer Science, Computer Engineering, Technology, Information Systems (CIS/MIS), Engineering or related technical discipline, or equivalent experience/training

Job description

Intro

Are you ready to explore a world of possibilities, both at work and during your time off? Join our American Airlines family, and you’ll travel the world, grow your expertise and become the best version of you. As you embark on a new journey, you’ll tackle challenges with flexibility and grace, learning new skills and advancing your career while having the time of your life. Feel free to enrich both your personal and work life and hop on board!

Why you'll love this job

This role is part of the TechOps Device & Application Technologies (DAT) organization supporting the Aviation ANSP program.You will work closely with American Airlines Cybersecurity teams, ensuring that DAT‑supported applications and endpoints meet security, logging, and compliance expectations.You’ll play a crucial part in maintaining accurate asset inventories, supporting log ingestion, enabling vulnerability remediation, and ensuring operational documentation and compliance readiness.

What You'll Do

• Ensure all DAT‑supported endpoints and applications are accurately inventoried and mapped for logging, monitoring, and vulnerability analysis
• Maintain alignment between asset inventories and Cybersecurity tools; investigate and resolve discrepancies
• Configure, validate, and troubleshoot log sources from Windows, Linux, and application platforms to ensure successful ingestion into enterprise SIEM tooling
• Perform daily SIEM reporting to identify log ingestion gaps and coordinate fixes with application and system owners
• Analyze log data to identify security‑relevant events and collaborate with Cybersecurity Incident Response Engineering on appropriate alerting requirements
• Review vulnerability scan outputs and partner with system/app owners to track, resolve, and verify remediation
• Work with Cybersecurity teams to ensure asset groups, tagging, and scanning coverage remain accurate
• Identify recurring issues or process gaps and recommend improvements to strengthen security posture
• Maintain security and operational runbooks, architectural documentation, ownership details, and dependency maps for DAT applications
• Ensure documentation meets internal standards and supports FAA, ANSP, and internal audit requirements
• Track changes within application environments to keep all documentation current and accessible
• Support the development of automated solutions to improve adherence to operational procedures and reliable recordkeeping
• Work closely with Cybersecurity, application owners, engineers, and infrastructure teams to ensure end‑to‑end alignment across asset, logging, vulnerability, and compliance workflows
• Participate in working sessions with ANSP Cybersecurity teams to support ongoing enhancements and new control requirements

All you'll need for success

Minimum Qualifications- Education & Prior Job Experience

• High School Diploma
• 1 year of Information Security experience

Preferred Qualifications- Education & Prior Job Experience

• Bachelor's degree in Computer Science, Computer Engineering, Technology, Information Systems (CIS/MIS), Engineering or related technical discipline, or equivalent experience/training
• 3 years of Information Technology experience
• Experience working with enterprise monitoring, logging, or vulnerability management tools
• Exposure to cybersecurity principles, SIEM, CMDB/asset systems, or compliance processes

Skills, Licenses & Certifications

• PowerShell, BASH, Python
• Foundational security certifications (Security+, CySA+, GSEC, or similar) are a plus but not required
• Experience supporting IT services across multiple platforms (Windows, Linux, application servers)
• Strong analytical and troubleshooting skills with the ability to diagnose issues and recommend solutions
• Ability to work independently, manage time effectively, and adapt to rapidly changing priorities
• Strong organizational skills and ability to maintain detailed documentation
• Ability to work in an environment driven by safety, reliability, and compliance
• Exposure to low‑code automation or reporting tools (e.g., Power Automate, Power BI, or similar platforms) is a plus
• Comfort working with structured data (tables, reports, dashboards) to support operational and compliance reporting
• Ability to build and maintain effective relationships with team members, customers, and external groups, as well as working in a collaborative environment with geographically dispersed resources
• Ability to thrive in a sense‑of‑urgency environment and leverage best practices

What You’ll Get

• Travel Perks: Ready to explore the world? You, your family and your friends can reach 365 destinations on more than 6,800 daily flights across our global network.
• Health Benefits: On day one, you’ll have access to your health, dental, prescription and vision benefits to help you stay well. And that’s just the start, we also offer virtual doctor visits, flexible spending accounts and more.
• Wellness Programs: We want you to be the best version of yourself – that’s why our wellness programs provide you with all the right tools, resources and support you need.
• 401(k) Program: Available upon hire and, depending on the workgroup, employer contributions to your 401(k) program are available after one year.
• Additional Benefits: Other great benefits include our Employee Assistance Program, pet insurance and discounts on hotels, cars, cruises and more

Feel free to be yourself at American

From the team members we hire to the customers we serve, inclusion and diversity are the foundation of the dynamic workforce at American Airlines. Our 20+ Employee Business Resource Groups are focused on connecting our team members to our customers, suppliers, communities and shareholders, helping team members reach their full potential and creating an inclusive work environment to meet and exceed the needs of our diverse world.

Are you ready to feel a tremendous sense of pride and satisfaction as you do your part to keep the largest airline in the world running smoothly as we care for people on life’s journey? Feel free to be yourself at American.